Let's talk about Microsoft .NET and look at Pamela Hollingsworth's system http://pomo.is-a-geek.com/basics/quotations.aspx.
Look at PopulateGrid and how it puts in the search term from the user. Also the cookie goes in directly. Compare to the insertCmd stuff with bind vars.
Where are the database username and password stored?
Note how the "Erase Personalization" link shows up only when relevant. What about the table format?
What about the lens calculator? How do we do it all at one URL?
How does error handling work in the books shopping case?
Let's compare to ASP.NET, David Dryjanski's